mozilla security static code scan tool, scanjs